Privacy Policy

1. Data controller

The data controller is SAVANTE AI, VAT 03031620424, registered at Via Guglielmo Marconi 129, 60127 Ancona (AN), Italia.

For any request concerning personal data, write to info@savante.ai.

2. What we collect

We collect only what is needed to respond to requests made through the site:

• Booking data: name, email address and any notes provided when booking a consultation through the Cal.com calendar embedded in the site.
• Callback requests: phone number and any details provided through the "Provalo subito" widget on the site.
• Technical data: IP address, browser type, pages visited and request timestamps, logged automatically by the servers hosting the site for security and diagnostics.

3. Purposes and legal bases

• Responding to consultation and callback requests: pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).
• Keeping the site secure, stable and free from abuse: the controller's legitimate interest (Art. 6(1)(f) GDPR).
• Meeting legal, accounting and tax obligations: legal obligation (Art. 6(1)(c) GDPR).

4. Providing your data

Providing the data requested in the booking and callback forms is optional, but necessary for us to get back to you. Without it we cannot act on the request.

5. Recipients and processors

Data may be processed by suppliers acting as processors, appointed under Art. 28 GDPR:

• Cal.com — managing the consultation calendar and bookings.
• The hosting and infrastructure provider for the site and for the API that serves the callback widget.
• Email providers used to reply to requests.

6. Where data is processed, and transfers

Data is processed on infrastructure located in the European Union. Where a supplier involves a transfer to a third country, that transfer takes place only under appropriate safeguards pursuant to Art. 44 et seq. GDPR, such as a European Commission adequacy decision or Standard Contractual Clauses.

7. Retention

• Booking and contact data: kept for as long as needed to handle the request and, where a relationship begins, for the duration of the contract and any statutory periods that follow.
• Technical logs: kept for a limited period, proportionate to the security and diagnostic purposes.
• At the end of those periods data is deleted or irreversibly anonymised.

8. Cookies and third-party components

The site does not use profiling cookies. Third-party components embedded in the pages — the Cal.com calendar and the callback widget — may set technical cookies required for them to work, and receive the user's IP address when they load. Refer to their own privacy notices for details of their processing.

9. Patient data belonging to client practices

When a dental practice uses DACOS, we process its patients' data as a processor, on the practice's documented instructions; the practice remains the controller. The relationship is governed by a Data Processing Agreement (DPA) signed before the service is activated.

Conversations, recordings and patient data are not used to train artificial intelligence models.

10. Your rights

Under Articles 15 to 22 GDPR, you have the right to:

• access your personal data and obtain a copy;
• request rectification or erasure;
• request restriction of processing, or object to processing based on legitimate interest;
• receive your data in a structured, commonly used format (portability);
• withdraw any consent at any time, without affecting the lawfulness of processing carried out beforehand.

11. Complaints to the supervisory authority

Requests to exercise these rights can be sent to info@savante.ai. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

12. Changes to this notice

This notice may be updated over time. The date of the most recent update is shown at the top of the page.